Method for transmitting sensitive information and copying mask based on two-dimensional code encryption

Abstract

The invention discloses a method for encrypted transmission of sensitive information and mask copying based on a two-dimensional code, which comprises the following steps: when a user needs to send the sensitive information in a chat process, encrypting the input information by using a password, splicing the encrypted information by using a timestamp and a validity period, and performing secondary encryption; splicing the secondarily encrypted information with the last page address to generate a two-dimensional code, sharing the two-dimensional code to a receiver, informing an opposite side of a password through other ways, prompting the opposite side to input the password to decrypt the information for the first time after the receiver accesses the page with few codes, analyzing whether the information is expired after the decryption is successful, and if the information is not expired, sending the two-dimensional code to the receiver. And carrying out secondary decryption to obtain sensitive information, carrying out mask operation on the sensitive information, then displaying the sensitive information on an interface, and providing a copy button to enable a receiver to copy the sensitive information so as to finish subsequent operation. According to the invention, the website for providing service does not store sensitive information and passwords, and bystanders can be prevented from seeing the passwords, so that the purpose of confidential transmission of the sensitive information is achieved.

Description

Technical Field

[0001] The invention relates to a method for transmitting sensitive information based on two-dimensional code encryption and masking copying, belonging to the technical field of encrypted information transmission. Background Art

[0002] With the rise of various instant messaging software such as QQ and WeChat, people are becoming more and more dependent on these chat software in their daily lives. However, when we need to send some sensitive information during the chat process, we basically send it to the other party in plain text. Although the chat information is encrypted by the instant messaging software itself during transmission, it is inevitable that the data will be viewed by other bystanders. For example: sometimes you need to tell the recipient a system username and password at work. Generally, it is sent directly to the other party through the chat tool. At the same time, when the other party copies the information, they also directly choose the information on the chat software to copy. In this process, other people may see your password information, resulting in the leakage of the username and password, causing some unnecessary losses. Summary of the invention

[0003] The technical problem to be solved by the present invention is to provide a method for encrypting and transmitting sensitive information based on a two-dimensional code and masking and copying the information, so as to solve the technical problems existing in the above-mentioned prior art.

[0004] The technical solution adopted by the present invention is: a method for encrypting and transmitting sensitive information based on a two-dimensional code and masking and copying the sensitive information, comprising the following steps:

[0005] a. Provide an information input page, which includes a password input component, a sensitive information input component to be transmitted, and an expiration date input component, where the expiration date is in minutes;

[0006] b. Enter a password A with a length of 6 or more and 16 or less characters. Use password A to generate encryption key B. Password A is not stored and must be memorized by the sender and sent to the receiver through other means.

[0007] c. First, use secret key B to encrypt the sensitive information to obtain encrypted information C;

[0008] d. Then, information C is spliced ​​with timestamp information and validity period information to obtain information D;

[0009] e. Use secret key B to encrypt information D again to obtain information E;

[0010] f. Use a URL address to concatenate the encrypted information, and then generate a shareable QR code image F with the concatenated information;

[0011] g. Share the QR code F with the recipient through a third-party communication tool;

[0012] h. After receiving the QR code, the recipient uses a third-party communication tool to scan the code and open the page G corresponding to the URL address;

[0013] i. A password input box pops up on page G, prompting the recipient to enter the password A obtained through other means;

[0014] j. Generate secret key I from password A;

[0015] k. Decrypt the ciphertext for the first time using secret key I;

[0016] l. Analyze the corresponding timestamp and validity period of the information after the first decryption and the information C after the first encryption, obtain the current system time and timestamp to calculate the corresponding number of minutes and compare it with the validity period. If it is not within the validity period, it will prompt that the information has expired and cannot be extracted. If it is within the validity period, the information will be decrypted with the secret key I to obtain information H;

[0017] m. Take the first two digits and the last two digits of the information H, and replace the middle part with the mask * to obtain the mask information J;

[0018] n. Display information J on the page and display a button K next to it, prompting the recipient to click to copy the sensitive information;

[0019] o. Click button K to put the decrypted information into the clipboard, and the recipient can perform other operations later.

[0020] Beneficial effects of the invention: Compared with the prior art, the invention provides a method for transmitting sensitive information based on QR code encryption and masked copying, which is mainly used for the transmission of sensitive information. In this process, since only the sender and the receiver know the password, the website used to provide services does not store sensitive information and passwords, and the receiver will not know the specific password during the whole process, and only needs to copy and paste it for use, thereby preventing bystanders from seeing the password, thereby achieving the purpose of confidential transmission of sensitive information. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1 The present invention discloses a method for encrypting and transmitting sensitive information based on a QR code and performing masked copying. DETAILED DESCRIPTION

[0022] The present invention is further described below in conjunction with the accompanying drawings and specific embodiments.

[0023] Embodiment 1:

[0024] A method for encrypting and transmitting sensitive information based on a QR code and masking and copying the sensitive information comprises the following steps:

[0025] a. Provide an information input page, which includes a password input component, a sensitive information input component to be transmitted, and an expiration date input component, where the expiration date is in minutes;

[0026] b. Enter a password A with a length of 6 or more and 16 or less characters. Use password A to generate encryption key B. Password A is not stored and must be memorized by the sender and sent to the receiver via other means, such as text messages.

[0027] c. First, use secret key B to encrypt the sensitive information to obtain encrypted information C;

[0028] d. Then, information C is spliced ​​with timestamp information and validity period information to obtain information D;

[0029] e. Use secret key B to encrypt information D again to obtain information E;

[0030] f. Use a URL address to concatenate the encrypted information, and then generate a shareable QR code image F with the concatenated information;

[0031] g. Share the QR code F with the recipient through a third-party communication tool;

[0032] h. After receiving the QR code, the recipient uses a third-party communication tool to scan the code and open the page G corresponding to the URL address;

[0033] i. A password input box pops up on page G, prompting the recipient to enter the password A obtained through other means;

[0034] j. Generate secret key I from password A;

[0035] k. Decrypt the ciphertext for the first time using secret key I;

[0036] l. Analyze the corresponding timestamp and validity period of the information after the first decryption and the information C after the first encryption, obtain the current system time and timestamp to calculate the corresponding number of minutes and compare it with the validity period. If it is not within the validity period, it will prompt that the information has expired and cannot be extracted. If it is within the validity period, the information will be decrypted with the secret key I to obtain information H;

[0037] m. Take the first two digits and the last two digits of the information H, and replace the middle part with the mask * to obtain the mask information J;

[0038] n. Display information J on the page and display a button K next to it, prompting the recipient to click to copy the sensitive information;

[0039] o. Click button K to put the decrypted information into the clipboard, and the recipient can perform other operations later.

[0040] Here’s how it works:

[0041] In the process of sensitive information transmission, the secret key is first generated by the password entered by the user, and the sensitive information is encrypted with the secret key. The encrypted information is spliced ​​with the timestamp and its validity period, and then the spliced ​​information is re-encrypted with the secret key. The re-encrypted information is spliced ​​with a page address to generate a QR code image. The generated QR code is sent to the recipient through third-party instant messaging such as WeChat and QQ, and the sender informs the recipient of the password through other channels such as mobile phone text messages or phone calls. After receiving the QR code, the recipient scans the code to open the connection address, enters the password obtained on the page according to the prompt, generates the secret key with the password, and then uses the secret key to decrypt the information for the first time. After decryption, the timestamp information and its validity period are analyzed, and it is determined whether it is within the validity period. If it is not within the validity period, a prompt will be given. If it is within the validity period, the information is decrypted for the second time with the secret key. After successful decryption, the first two and last two digits of the obtained information are taken, and the middle part is replaced by a mask * to be displayed on the interface, and a button to copy the information is provided. After the recipient clicks the button, the real information is put into the clipboard, and the recipient will copy it to other places later to complete the whole process.

[0042] For example: the sender wants to tell the receiver the login password of a certain system. First, generate a QR code and share it with the receiver, and send a text message to tell the receiver the decryption password. After the receiver recognizes the QR code, he enters the decryption password as prompted. After successful decryption, click the copy button to copy the password and paste it into the password input component of a certain system to complete the login to the system.

[0043] During the entire process, the recipient will not know the actual password of a system. He only needs to copy and paste it to prevent bystanders from seeing the password.

[0044] The above description is only a specific implementation mode of the present invention, but the protection scope of the present invention is not limited thereto. Any technician familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed by the present invention, which should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims

1. A method for encrypting and transmitting sensitive information based on a QR code and masking and copying the sensitive information, characterized in that: The following steps are involved: a. Provide an information input page, which includes a password input component, a sensitive information input component to be transmitted, and an expiration date input component, where the expiration date is in minutes; b. Enter a password A with a length of 6 or more and 16 or less characters. Use password A to generate encryption key B. Password A is not stored and must be memorized by the sender and sent to the receiver through other means. c. First, use secret key B to encrypt the sensitive information to obtain encrypted information C; d. Then, information C is spliced ​​with timestamp information and validity period information to obtain information D; e. Use secret key B to encrypt information D again to obtain information E; f. Use a URL address to concatenate the encrypted information, and then generate a shareable QR code image F with the concatenated information; g. Share the QR code F with the recipient through a third-party communication tool; h. After receiving the QR code, the recipient uses a third-party communication tool to scan the code and open the page G corresponding to the URL address; i. A password input box pops up on page G, prompting the recipient to enter the password A obtained through other means; j. Generate secret key I from password A; k. Decrypt the ciphertext for the first time using secret key I; l. Analyze the corresponding timestamp and validity period of the information after the first decryption and the information C after the first encryption, obtain the current system time and timestamp to calculate the corresponding number of minutes and compare it with the validity period. If it is not within the validity period, it will prompt that the information has expired and cannot be extracted. If it is within the validity period, the information will be decrypted with the secret key I to obtain information H; m. Take the first two digits and the last two digits of the information H, and replace the middle part with the mask * to obtain the mask information J; n. Display information J on the page and display a button K next to it, prompting the recipient to click to copy the sensitive information; o. Click button K to put the decrypted information into the clipboard, and the recipient can perform other operations later.

Images